Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File:                     FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier:          0++RzoyB3QJqKM068uwz7zTwExSSykVsWCpxidac8LY=
Subject key identifier:   88:E7:03:10:0C:2F:91:04:0B:51:C6:6A:38:2A:F1:63:DB:04:20:17
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer:       /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial:       01A12EB305CE0AAA063C7813335C4B2CA13A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number:          1A9F
Signing time:             Mon 12 Oct 2026 06:00:46 +0000
Manifest this update:     Mon 12 Oct 2026 06:00:46 +0000
Manifest next update:     Tue 13 Oct 2026 06:00:46 +0000
Files and hashes:         1: 2_PmjSq2ymAnVudAlocm7T1tmn4.roa (hash: QSuT7TExW9U0JzR64tb3XYLCTidPjZYgevzpEmIents=)
                          2: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: ICCtPoRU/pZ3t1+q/7DCkWgJNu1k0MSvATb+8E5lTB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2e:b3:05:ce:0a:aa:06:3c:78:13:33:5c:4b:2c:a1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
        Validity
            Not Before: Oct 12 06:00:46 2026 GMT
            Not After : Oct 13 06:00:46 2026 GMT
        Subject: CN=88e703100c2f91040b51c66a382af163db042017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:d2:20:3e:c5:d2:bb:22:0f:7e:98:d4:ff:
                    3c:2e:f1:9a:2b:af:c1:ad:c4:09:83:e0:3c:fa:77:
                    fd:4e:0b:20:0f:03:ee:02:0e:74:5b:2a:37:12:ad:
                    07:31:3c:80:32:c0:de:9b:e5:a5:7e:be:d6:9d:fb:
                    f2:84:a9:77:6a:60:c8:04:1c:c9:7f:0f:05:55:b2:
                    7a:e6:df:00:53:3e:c4:58:b3:64:ec:7e:8c:72:ac:
                    95:be:48:47:8c:1a:8a:66:e9:cf:84:11:f3:a2:5d:
                    a9:7a:fa:d9:70:81:a2:75:04:c3:02:96:4b:12:1d:
                    13:33:94:ef:7c:ba:92:f5:12:00:dc:e9:ee:f2:a2:
                    0c:30:37:cd:13:62:a5:c6:50:ad:d7:d6:5d:bf:71:
                    1d:b9:61:f4:9d:13:ae:7a:6a:44:42:43:a7:42:c3:
                    1c:78:8e:9f:a6:de:2f:3c:89:8f:ef:c6:84:50:0b:
                    ab:a0:01:0a:b9:61:02:2c:ef:ab:c3:b5:bb:6d:51:
                    f9:d6:9e:60:b0:d6:5e:45:44:0f:db:70:ae:72:0c:
                    9b:a9:49:7a:dd:40:a9:5a:00:b4:e8:ab:84:cf:0c:
                    9a:47:bd:04:88:93:ed:e6:0b:49:28:35:3e:3b:d1:
                    b0:f4:2d:69:29:ed:a5:a3:d8:0a:f6:aa:fd:e2:d0:
                    af:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:03:10:0C:2F:91:04:0B:51:C6:6A:38:2A:F1:63:DB:04:20:17
            X509v3 Authority Key Identifier:
                keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:17:3a:dd:a9:45:6e:f6:6e:d7:8f:b7:c2:a7:55:37:6b:54:
         6a:f8:ce:32:fc:ff:5c:ce:69:4f:76:f0:f1:1e:0a:cb:28:8f:
         47:59:bf:d3:65:20:e4:7a:5f:c6:d7:7f:31:38:f8:c7:28:19:
         43:7f:18:2e:64:b4:7f:13:d1:9a:6a:b2:67:aa:77:a6:69:40:
         0a:9d:7f:d5:f1:bc:f8:0e:6e:21:1f:49:fb:c3:14:8c:f0:0a:
         ab:e7:0c:31:c6:c6:7e:1d:81:1b:b0:33:c6:d3:9b:ce:42:85:
         2c:02:68:be:ce:b8:ac:de:06:13:d1:ba:b6:6b:67:44:df:98:
         1d:8a:12:53:c1:0f:b7:01:18:8d:9e:39:92:92:f6:08:a9:f5:
         3e:f8:13:08:13:54:da:6a:e6:5d:40:a3:03:1e:49:82:b6:b6:
         31:b1:37:8f:04:c0:8a:cc:57:dc:72:4a:71:e0:46:c2:34:17:
         de:b3:65:e8:49:e3:14:f4:eb:ef:f0:a0:cd:03:fc:fd:10:30:
         60:86:8c:cb:43:8d:2c:64:35:ae:19:75:5f:e2:8e:b7:1f:08:
         43:f1:37:c4:00:cb:10:ac:64:a0:b5:6c:b0:a2:d7:88:94:47:
         20:1e:b6:b5:a7:1d:63:c8:a8:99:2c:03:95:4b:e6:d8:db:83:
         c1:03:5c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:53:35 2026 by rpki-client